Helmut Eshun

Experience

1. Information Security Analyst

   Sam's Club

   Aug 2017 — Present · Houston, TX, US

   Performs risk assessments on organizational controls around information security including cyber and physical, business continuity and disaster recovery, resiliency, privacy, and governance • Demonstrated expertise and practical experience in implementing and adhering to industry-leading cybersecurity standards and frameworks, including ISO 27001, NIST SP 800-171, NIST SP 800-53, COBIT, and PCI-DSS. • Coordinates and manages the due diligence risk assessment of third-party services by internal subject matter experts • Performs review of completed vendor assessment questionnaires for conformance to program objectives and methodology • Collaborates with team members to track, update and improve Vendor Risk Management Program procedures and process • Assists with providing monthly reporting and other matrices to GRC and Security leadership teams • Prepares third-party risk assessment summary reports • Builds relationships with internal stakeholders and vendors and encourages collaboration • Monitors and assess supplier performance to ensure compliance with VRM programs, regulatory requirements and service level agreements • Organizes the collection of required artifacts (e.g. SOC reports, flow diagrams, policy documents) from suppliers regularly • Collects supporting documentation for external and internal audit requests. • Works with business leaders and vendor relationship managers to document appropriate remediation plans to reduce identified vendor risks

Education

• Texas Tech University - Rawls College of Business

  Master's degree, Business Administration and Management, General

  2016 — 2016

• Texas Tech University

  Bachelor's degree, Petroleum Engineering

  2012 — 2015